On this page
About this policy
Eightstep (we, us, our) respects your privacy and handles personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. This policy sets out how we handle the personal information we hold.
It applies to our website, our sales and advisory process, and the services we provide to clients. If you give us personal information about another person, please make sure they have seen this policy.
What we collect
The personal information we collect depends on how you deal with us. It usually includes your name, business email address, phone number, job title, and the organisation you work for. If you book a meeting or become a client, we may also collect details about your business context and the tools you use, so we can give advice that fits.
When you visit our website, we collect technical information such as your device type, browser, and the pages you view. See Cookies and analytics below.
We do not seek to collect sensitive information, such as health or biometric data, and we ask that you do not send it to us.
How we collect it
We collect most information directly from you, for example when you fill in a form, book a meeting, email us, or speak with our team. We also collect information automatically when you use our website, and occasionally from third parties such as business contact databases or referrals, where it is reasonable to do so.
Why we use it
We use your personal information to respond to enquiries, run scoping meetings, recommend and deliver our IT and security services, manage our client relationships, and improve our website and services. We also use it to send you information we think is relevant, where you have asked for it or where the law allows.
We only use your information for the purpose we collected it, a related purpose you would reasonably expect, or a purpose you have agreed to.
Cookies and analytics
Our website uses cookies and similar technologies, such as scripts and pixels, to keep the site working, understand how it is used, and measure the results of our marketing.
We use third-party tools for this, such as Google Analytics, loaded through a tag manager. They collect information about your visit, such as the pages you view, how you arrived at our site, your device and browser, and your approximate location, and your IP address may be processed to provide it. We use this information to see which pages are useful, improve the site, and understand which of our marketing works. We may also use tools from advertising platforms to measure our campaigns and to show our ads to people who have visited our site.
The tools we use change from time to time, but they are always used for the purposes described here. Their providers may set their own cookies, may store and process information outside Australia (see Overseas disclosure), and handle it under their own privacy policies.
You can control or delete cookies through your browser settings, and you can stop Google Analytics collecting information about your visits with Google's opt-out browser add-on. Turning off some cookies may affect how the site works.
Marketing and opt out
If you have subscribed, or we have an existing relationship, we may send you articles and updates by email. Every marketing email includes an unsubscribe link, and you can opt out at any time. You can also contact us to update your preferences. Opting out of marketing does not stop the service messages we need to send you as a client.
When we share it
We do not sell your personal information. We share it only where we need to: with service providers who help us run our business, such as hosting, email, analytics, and client relationship management providers; with technology vendors and carriers where you have engaged us to supply or manage a service for you; and where the law requires or authorises it. Our providers are required to protect your information and use it only for the services they provide to us.
Overseas disclosure
Some of our service providers store or process information outside Australia. Where this happens, we take reasonable steps to make sure your information is handled consistently with the Australian Privacy Principles. You can ask us which countries are involved.
How we protect it
As a managed IT and security provider, protecting information is core to what we do. We hold personal information in secured systems and apply technical and organisational controls, such as access restrictions, encryption in transit, and monitoring. No system is ever completely secure, but we work to reduce the risk of loss, misuse, and unauthorised access, and we act quickly if something goes wrong.
How long we keep it
We keep personal information only for as long as we need it for the purposes set out in this policy, or for as long as the law requires. When we no longer need it, we take reasonable steps to delete it or to remove anything that identifies you.
Access and correction
You can ask to see the personal information we hold about you and to correct anything that is wrong or out of date. Contact us using the details below. We will respond within a reasonable time, and if we cannot give access, we will explain why. There is normally no charge to make a request.
Making a complaint
If you think we have mishandled your personal information, please contact us first so we can look into it. We will acknowledge your complaint and aim to resolve it promptly. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.
Changes to this policy
We may update this policy from time to time to reflect changes in our practices or the law. The current version is always on this page, with the date it was last updated shown at the top.
Contact us about your privacy
If you have a question about this policy, want to access or correct your information, or wish to make a complaint, contact our privacy officer.
Privacy Officer, Eightstep
privacy@eightstep.com.au